2V0-71.23 Question 342
Select 3You are tasked with implementing security controls for a Kubernetes cluster managed by VMware Tanzu Mission Control (TMC). To ensure compliance with your organization's policies, you need to enforce network segmentation, restrict resource access, and monitor cluster configurations for security vulnerabilities. Which actions would you take using Tanzu Mission Control to achieve these objectives?
- A
Define and apply network policies using Tanzu Mission Control's policy management features.
- B
Set up role-based access control (RBAC) policies through Tanzu Mission Control to restrict resource access.
- C
Enable Tanzu Service Mesh to provide application-level security and encryption between services.
- D
Use Tanzu Mission Control to perform a cluster inspection and identify configuration vulnerabilities.
- E
Deploy a custom container image scanner directly through Tanzu Mission Control.
Show answer and explanation
Correct answers: A, B, D
Explanation
To secure Kubernetes clusters managed by VMware Tanzu Mission Control, you can use its policy management features for network segmentation, enforce RBAC policies to restrict access, and perform cluster inspections to identify vulnerabilities. While Tanzu Service Mesh and container image scanning are valuable security tools, they are not directly implemented through Tanzu Mission Control, making them incorrect for this scenario.
- A. Correct.
This is correct. Tanzu Mission Control allows you to define and enforce network policies on Kubernetes clusters to control traffic between pods and namespaces, ensuring network segmentation.
- B. Correct.
This is correct. Tanzu Mission Control supports role-based access control (RBAC) policies to manage user permissions and restrict access to cluster resources.
- C. Incorrect.
This is incorrect. While Tanzu Service Mesh provides security and encryption at the application level, it is not directly managed through Tanzu Mission Control but rather as a separate Tanzu component.
- D. Correct.
This is correct. Tanzu Mission Control provides a cluster inspection feature that helps identify configuration vulnerabilities and ensure compliance with best practices.
- E. Incorrect.
This is incorrect. Tanzu Mission Control does not natively include a container image scanner; this would require integrating a third-party tool or component.